This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/9a7l7zzqZbbCcq5xjOHOgSKl8o8.roa File: 9a7l7zzqZbbCcq5xjOHOgSKl8o8.roa (raw, json) Hash identifier: +xAWYrQw6rSpzQWcfX/G464LqZ0gyWw3AgC475ltgTU= Subject key identifier: F5:AE:E5:EF:3C:EA:65:B6:C2:72:AE:71:8C:E1:CE:81:22:A5:F2:8F Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Certificate serial: 019A5B85AA70483841FE3800FEFAEC7FA27C Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/9a7l7zzqZbbCcq5xjOHOgSKl8o8.roa Signing time: Thu 06 Nov 2025 23:34:37 +0000 ROA not before: Thu 06 Nov 2025 23:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216244 IP address blocks: 185.85.72.0/24 maxlen: 24 185.85.73.0/24 maxlen: 24 185.85.74.0/24 maxlen: 24 185.85.75.0/24 maxlen: 24 185.160.28.0/24 maxlen: 24 185.160.29.0/24 maxlen: 24 185.160.30.0/24 maxlen: 24 185.160.31.0/24 maxlen: 24 2a05:abc0::/48 maxlen: 48 2a05:abc0:1::/48 maxlen: 48 2a05:abc0:2::/48 maxlen: 48 2a05:abc0:3::/48 maxlen: 48 2a05:abc0:4::/48 maxlen: 48 2a05:abc0:5::/48 maxlen: 48 2a05:abc0:6::/48 maxlen: 48 2a05:abc0:7::/48 maxlen: 48 2a05:abc0:8::/48 maxlen: 48 2a05:abc0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5b:85:aa:70:48:38:41:fe:38:00:fe:fa:ec:7f:a2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Validity Not Before: Nov 6 23:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5aee5ef3cea65b6c272ae718ce1ce8122a5f28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:15:fb:bf:f6:77:cc:5b:97:7b:84:63:da:56: fd:b0:ee:14:f3:b0:3d:91:8b:62:9e:29:17:5d:66: 46:58:7f:03:af:62:f4:ce:65:d1:f9:bd:8b:a0:f6: f9:21:c9:ff:bf:19:b7:0e:83:2a:31:d6:26:13:ea: 41:04:17:dd:f4:72:d3:94:69:3c:7f:d2:9d:aa:c9: 40:38:d9:65:ba:04:9e:82:30:39:e5:05:b8:a3:c3: e3:04:5f:10:f5:25:85:75:88:c0:eb:df:ae:dd:1a: 4a:90:ca:92:e3:d8:dc:43:62:71:1b:ce:b8:87:74: 59:19:c6:a9:24:0f:05:99:78:66:08:fe:bb:a3:69: b8:ba:b5:1b:4c:48:32:98:86:06:b0:e7:10:69:78: cc:e5:19:70:97:ce:92:3b:9f:d2:75:51:0d:53:d4: 4c:22:20:a5:ff:72:09:b3:ca:58:5c:0b:d3:a6:cc: 27:c0:04:fa:e0:ae:e9:5a:27:94:86:b0:b2:90:84: 01:96:af:52:4a:06:13:09:e6:d6:96:72:2f:d4:d7: 3c:96:ef:e4:d4:0d:ef:45:75:38:f1:ff:09:29:91: 24:50:41:27:d0:e1:70:4d:2a:bc:4a:2b:3b:9e:da: 46:97:bb:0e:69:78:50:bf:fb:59:28:3d:9c:fb:94: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AE:E5:EF:3C:EA:65:B6:C2:72:AE:71:8C:E1:CE:81:22:A5:F2:8F X509v3 Authority Key Identifier: keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/9a7l7zzqZbbCcq5xjOHOgSKl8o8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.72.0/22 185.160.28.0/22 IPv6: 2a05:abc0::-2a05:abc0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4a:52:ec:52:78:76:4e:15:5b:c0:2a:a6:ef:2b:ee:25:e6:15: c0:d8:ba:6d:e1:21:e1:b7:09:35:67:fb:d0:58:51:ce:2b:3b: e9:3f:a6:48:33:7e:e6:f5:09:19:0c:b9:90:ba:56:4a:59:7b: 62:74:1f:ff:5a:bd:ed:d8:53:27:57:fa:0e:e7:7f:be:53:b4: 74:82:b2:63:55:89:c5:fe:3f:d5:f2:a1:86:cc:47:41:33:eb: c7:ea:f1:9b:81:ca:48:e4:52:68:51:ce:44:7c:f5:7b:b1:26: 98:e1:50:af:29:9f:92:c3:7f:3f:c3:e2:43:ce:07:f5:8f:9a: 8d:f8:b8:cd:25:50:9b:ae:63:a4:1d:54:9a:1b:61:73:f3:86: de:94:6d:bf:88:17:6c:78:0f:cf:30:19:97:e4:44:7a:43:b7: 9a:39:97:d8:3b:2a:62:63:35:97:7b:40:ea:73:ed:5b:b6:6c: a8:ad:59:f5:b5:76:df:ad:ee:af:b4:54:17:85:9b:08:81:a6: de:c4:ac:8a:01:37:79:0d:b5:55:2d:ba:31:28:4a:47:5e:cf: 70:bd:77:47:33:e9:1e:93:03:ab:e9:6c:1c:c3:32:fe:43:26: 37:6a:49:f3:be:ce:e0:a1:bd:54:fb:26:9c:e3:ba:bb:6e:3b: ac:ce:b4:c2 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZpbhapwSDhB/jgA/vrsf6J8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0 M2JmOTEwHhcNMjUxMTA2MjMzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWFlZTVlZjNjZWE2NWI2YzI3MmFlNzE4Y2UxY2U4MTIyYTVmMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BX7v/Z3zFuXe4Rj2lb9sO4U87A9 kYtinikXXWZGWH8Dr2L0zmXR+b2LoPb5Icn/vxm3DoMqMdYmE+pBBBfd9HLTlGk8 f9KdqslAONllugSegjA55QW4o8PjBF8Q9SWFdYjA69+u3RpKkMqS49jcQ2JxG864 h3RZGcapJA8FmXhmCP67o2m4urUbTEgymIYGsOcQaXjM5Rlwl86SO5/SdVENU9RM IiCl/3IJs8pYXAvTpswnwAT64K7pWieUhrCykIQBlq9SSgYTCebWlnIv1Nc8lu/k 1A3vRXU48f8JKZEkUEEn0OFwTSq8Sis7ntpGl7sOaXhQv/tZKD2c+5TxoQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFPWu5e886mW2wnKucYzhzoEipfKPMB8GA1UdIwQY MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt NDQwNTI4YzFlNDllLzEvOWE3bDd6enFaYmJDY3E1eGpPSE9nU0tsOG84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCuVVIAwQC uaAcMBgEAgACMBIwEAMFBioFq8ADBwEqBavAAAgwDQYJKoZIhvcNAQELBQADggEB AEpS7FJ4dk4VW8Aqpu8r7iXmFcDYum3hIeG3CTVn+9BYUc4rO+k/pkgzfub1CRkM uZC6VkpZe2J0H/9ave3YUydX+g7nf75TtHSCsmNVicX+P9XyoYbMR0Ez68fq8ZuB ykjkUmhRzkR89XuxJpjhUK8pn5LDfz/D4kPOB/WPmo34uM0lUJuuY6QdVJobYXPz ht6Ubb+IF2x4D88wGZfkRHpDt5o5l9g7KmJjNZd7QOpz7Vu2bKitWfW1dt+t7q+0 VBeFmwiBpt7ErIoBN3kNtVUtujEoSkdez3C9d0cz6R6TA6vpbBzDMv5DJjdqSfO+ zuChvVT7JpzjurtuO6zOtMI= -----END CERTIFICATE-----Generated at Sat Dec 6 20:43:54 2025 by rpki-client